Skip to content

v1.8.6 - TEST CANDIDATE - performance and evidence-safety fixes

Pre-release
Pre-release

Choose a tag to compare

View all tags
@pupontech pupontech released this 11 Oct 10:37
v1.8.6
3e64459

Windows technician tool for investigating and cleaning up unauthorized remote-access software on client machines - typically after a tech-support scam, where the client was talked into letting someone remote in.

v1.8.6 - testing candidate

Approved v1.8.5 remains the latest stable release. This candidate contains six targeted changes from the code review:

  • Faster persistence progress draining: the completed 600-line synthetic provider previously falsely timed out at 13.570 seconds; it now completes at 1.610 seconds locally. Idle backoff, heartbeats and both watchdog deadlines remain.
  • Deduplicated script-inventory traversal: overlapping-root fixture directory reads 5 -> 2, hashes/records 8 -> 3. These are synthetic measurements, not a live Windows collection-speed claim.
  • Review audit output refuses pre-existing/redirected files and creates records exclusively, preventing hard-link overwrite. Audit-write failures return nonzero.
  • After-snapshot/diff failures no longer suppress the report; a separate failure artifact preserves INCOMPLETE status and existing evidence.
  • AV-uninstall error text is HTML-escaped consistently.
  • Single-section snapshot JSON preserves empty/single/multiple row arrays and the SRUM object shape.

Removal policy is unchanged. ScreenConnect removal remains technician-approved; unrelated services and startup items are not automatically removed as part of ScreenConnect cleanup.

Verification

Windows Server 2022 and 2025, PowerShell 5.1 and pwsh, including tests against the extracted ZIP: https://github.com/pupontech/screenconnect-cleanup/actions/runs/38132081776

45 local check commands exited zero (native Windows-only skips explicit); independent scoped source review found no introduced High/Medium defects. Published asset is the verified Windows 2022 CI artifact, not a rebuild.

Source: 3e644599a95316b83e9a986ae5ea5b9a2cf858de
ZIP SHA-256: 2b9a48ce760a2c356750792114daae23e0f5b4ecfb011788bc621ea2db296b73

Remaining review finding

The existing SYSTEM logon resume task has no bounded retry/expiry policy on failed post-reboot verification. It can remain registered across logons. That lifecycle was not silently changed in this optimization patch; it needs a separate policy decision and Windows tests. This candidate is not certification of reboot-resume or unrestricted production readiness.

Full review, source-line evidence, regression tests and further optimization opportunities: docs/13-legacy-code-review.md in the ZIP, or https://github.com/pupontech/screenconnect-cleanup/blob/3e644599a95316b83e9a986ae5ea5b9a2cf858de/docs/13-legacy-code-review.md

Extract into a fresh folder for owner testing. No agents ran live scanners, installers, collector providers, removal or reboot; owner live acceptance remains required.

Assets 4
Loading